Director of Security & Compliance

Anvilogic Inc

About The Position

Anvilogic is seeking a Director of Security & Compliance to be responsible for earning and maintaining customer trust. This is a customer-facing leadership role where you will partner with prospects and customers on their security and compliance needs, including leading trust and security reviews, responding to questionnaires and audit requests, and articulating the company's security posture. Internally, you will own and mature Anvilogic's security program, ensure compliance with SOC 2 Type II and ISO 27001, lead a team focused on security engineering and compliance, and oversee IT operations.

Requirements

10+ years in security or security engineering, with 3+ years in a customer-facing or GRC capacity (trust reviews, questionnaires, audits).
2+ years managing security engineers or a comparable technical team.
Strong grounding in cloud security (AWS preferred), including infrastructure, identity and access, and application security.
Proven ability to represent a security posture credibly to enterprise security teams, CISOs, and auditors, and to translate technical controls into clear assurances.
Sound judgment on prioritizing security work against real risk at a fast-moving company.

Nice To Haves

Experience at a security vendor or in a company selling to enterprise security teams.
Familiarity with security operations tooling (SIEM, detection engineering, threat detection) and how modern SOC teams work.
Experience owning or overseeing IT in a growing company.
Background scaling a security program from an early or mid stage.

Responsibilities

Serve as Anvilogic's security point of contact for prospects and customers, leading trust and security reviews across the sales cycle and customer lifecycle.
Own security questionnaires, RFP security sections, and audit-support requests, turning them around quickly and credibly for enterprise security teams.
Own and mature Anvilogic's internal security program across cloud infrastructure, applications, corporate systems, and data, including vulnerability management, monitoring, and incident response.
Maintain SOC 2 Type II and ISO 27001 compliance: manage the control environment, coordinate audits, and keep evidence collection continuous.
Lead and grow a small team spanning security engineering and compliance, and own the security roadmap and priorities.
Oversee IT operations (identity and access, endpoint management, SaaS administration) in a way that reinforces the security posture.